Privacy
What this site collects, why, who handles it, and how to have it deleted. In plain words. I don't sell your information or use it for advertising.
Who I am
crisgth.com is the website of Cristian Thomas (Cris), on the Caribbean coast of Costa Rica. I decide what happens to the information described here. For anything about it, write to cris@crisgth.com.
When you fill in a form
The free tools ask for your name and, depending on the tool, your email, phone number, company, website or niche. I use them to send you what you asked for and to follow up about it, and for nothing else.
With each submission the site also records: the page or link that brought you (including any utm tags), how long the form took to fill in, your browser's user-agent, and the approximate location the host works out from your connection (country, city, time zone). Your IP address is turned into a one-way scrambled code before anything is stored; the address itself is never kept. The phone number and the email's domain are checked for warning signs, such as premium-rate numbers. All of this is there to keep spam and fraud out.
You get a confirmation email, and I get an alert with your details on my phone.
When you message me
WhatsApp and email reach me directly. What you send is handled by WhatsApp (Meta) or my email provider under their own terms, and I keep it as long as our conversation needs it.
On pages I send to businesses directly, such as the hotel stay offer, the WhatsApp and email buttons write a message for you, with a reference code and the package you built. The code is the letter of the page design you saw and, if your link carried one, a contact number that holds no personal details. Nothing is sent until you send it.
Analytics
I count visits to learn what's useful. Vercel Web Analytics and Speed Insights give page views and loading speed, without cookies. Google Analytics 4 records page views and a few events — which page design you see and whether you switch, taps on contact buttons, how forms went — never your name, email or number. Its advertising features are off, and Google Analytics 4 doesn't log IP addresses.
Who handles it for me
- Vercel
- hosts the site and runs the analytics above.
- InstantDB
- stores form submissions.
- Inngest
- runs the steps after a submission; it carries only a record number.
- Upstash
- counts submissions per scrambled IP for five minutes, to stop floods.
- Resend
- sends your confirmation email.
- Telegram
- delivers the new-submission alert to my phone.
- Analytics.
- Seisbeta
- the contact widget, with its own form.
- Cal.com
- if you book a call.
- WhatsApp (Meta)
- if you message me there.
Some of them process data outside your country, including in the United States.
How long I keep it
Form submissions: until you ask me to delete them, or until they're no longer needed for the conversation they started. The flood counter: five minutes. Analytics: under each provider's retention settings; Google Analytics keeps event-level detail for two months by default.
Your choices
Write to cris@crisgth.com to see what I hold about you, to correct it, or to have it deleted.
You can block analytics with your browser's privacy settings, a content blocker, or Google's Analytics opt-out add-on.
If you're in the EU or the UK you can also complain to your data protection authority; in Costa Rica, to PRODHAB.
Children
This site isn't meant for children under 16 and doesn't knowingly collect their information.
Changes
If this changes, so does the date at the top.